cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Firefox bypasses my home security and exposes porn!

dragonneus
Making moves

Firefox enabled DNS over HTTPS by default and silently bypassed my local DNS security controls (Technitium DNS with adult-content blocking).

This behavior undermines user-configured network security and was not clearly disclosed. I expect Firefox to respect system DNS by default or require explicit opt-in with a clear warning.

This is especially problematic for families and administrators who rely on network-level protections.

3 REPLIES 3

azyrion
Making moves

Please help parent to protect our children

nsnns
Making moves
  • Vbejjehe

dftf
Collaborator

@dragonneus : on a local PC, you can create a "policies.json" file which can prevent this feature being used (assuming your kids don't have admin accounts on the PC, or they can just delete the file to undo the restriction).

For system administrators, Group Policy can be used on a domain to disable this feature.

See: https://firefox-admin-docs.mozilla.org/reference/policies/dnsoverhttps/ 

Two things to note:

1.   This isn't a Firefox-specific issue.  Brave, Chrome, Edge and Vivaldi all let users set an internal DNS over HTTPS that can be different from the system or router one.  (Opera and Safari likely do too; I cannot personally confirm.)

2.   Even if you restrict the local Firefox install via the "policies.json" file and your children don't have admin accounts on the PC, they could still download a portable version of Firefox which they can just unzip into a folder, run it and use the different DNS there.